Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File:                     d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier:          Ro4y8N2qPYtipD2XvV9wTNaqDIirK0zvJIJY9wPW5eA=
Subject key identifier:   13:56:DC:C6:78:2D:06:A6:A5:59:C2:BB:8B:42:3B:BF:4B:DA:1F:B3
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer:       /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial:       01992BC7396BF5BB991672E62426CBF21427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number:          0F33
Signing time:             Tue 09 Sep 2025 00:01:40 +0000
Manifest this update:     Tue 09 Sep 2025 00:01:40 +0000
Manifest next update:     Wed 10 Sep 2025 00:01:40 +0000
Files and hashes:         1: 07kw2MzDV5dpbfYC0MA4AILk1XE.roa (hash: tg8LJDbeLYQBkgtHitpgNGT/W91ZoJCC9459dV5/7ek=)
                          2: 0OhTHF6DxE3cyZK5YOwOI2V2BAI.roa (hash: xOeumj9MpchTNffEKnQPdj1nuV0b4wbm3GvMqDVnZVU=)
                          3: XyMxVfTmZ9FOajmxjytII90XihY.roa (hash: Y1EWEtYGvmWwkkpTBkRX8z/3qaLQ9HzYwz0slqYxxoo=)
                          4: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: G9ZQuC8SmVCrzOrxAoLO6sG2Hjgh8B0zDVZXgdvGXkM=)
                          5: hu_H7qNyqX0M9nrnuuS3ppV4Mqg.roa (hash: iUNoFw6w4VaZe+xv8tLLmkJfKNEUjAxo8NvVhIUNSuo=)
                          6: yKlkk126qceORNNApzws5uIc93s.roa (hash: mKSYxXo5NqSatA3b3IazY2+Vo1oI5zbJ9J8Ptl/baeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 00:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2b:c7:39:6b:f5:bb:99:16:72:e6:24:26:cb:f2:14:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
        Validity
            Not Before: Sep  9 00:01:40 2025 GMT
            Not After : Sep 10 00:01:40 2025 GMT
        Subject: CN=1356dcc6782d06a6a559c2bb8b423bbf4bda1fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d6:b8:02:d2:42:89:37:2b:10:22:28:42:fa:
                    53:18:92:5f:f9:92:1f:89:72:bc:1b:b1:f2:85:f2:
                    25:3a:23:22:27:b5:37:de:7c:26:fc:6a:ef:62:2b:
                    98:db:af:a4:e9:01:82:f0:0d:72:ff:ca:55:47:50:
                    30:f8:c6:30:45:fa:79:d5:64:00:66:91:57:ee:b9:
                    06:9e:0c:b0:a3:50:ac:41:7f:34:49:25:f3:eb:74:
                    9b:1b:f6:59:04:18:ea:47:b7:ee:cf:e1:b3:ce:60:
                    1b:ef:47:09:97:e2:91:eb:43:85:00:bd:02:92:41:
                    da:b3:5d:f6:84:af:01:a3:f6:b3:85:28:ab:5f:9f:
                    5b:64:e3:e3:7b:c5:42:80:5f:d1:fe:a8:d4:aa:f4:
                    69:8d:c9:2c:fc:8d:eb:c8:07:35:a6:67:28:2d:b7:
                    01:09:c3:a4:0b:bf:f8:ae:3e:be:91:b5:22:46:49:
                    c8:ae:b7:77:9f:c3:50:69:f9:31:c6:d0:c4:7a:d5:
                    2e:45:03:cd:1f:e6:6a:39:28:3f:3e:32:39:41:48:
                    6a:2a:b5:79:7a:64:91:68:d3:20:5d:20:52:d7:86:
                    6b:c6:ee:db:81:67:95:8d:45:88:c6:30:bc:36:0f:
                    e9:ee:f8:43:82:70:56:d9:4a:87:7b:65:38:4a:6a:
                    27:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:56:DC:C6:78:2D:06:A6:A5:59:C2:BB:8B:42:3B:BF:4B:DA:1F:B3
            X509v3 Authority Key Identifier:
                keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c4:92:95:b4:5e:43:91:5c:ad:7a:7c:5f:c5:27:72:fe:f9:
         fa:0a:75:29:ad:91:9d:a3:22:e9:92:ae:64:8f:c7:c1:7d:e4:
         34:b2:1e:85:06:1d:db:76:15:ed:20:b4:95:35:84:d8:ba:49:
         f9:c9:88:04:67:d4:1a:b7:58:16:e5:11:7c:65:26:0f:6a:b7:
         6d:85:8e:31:94:af:f5:0e:38:e6:05:05:63:46:f6:9f:02:75:
         bc:97:b0:e8:4d:d3:5e:76:09:09:50:79:d7:ad:1f:8f:c6:d7:
         db:1b:94:de:90:ce:0e:e2:85:14:56:67:e0:72:9a:24:98:2f:
         56:36:98:5b:52:e8:4a:cf:86:d7:5a:6f:5d:d4:c7:53:d0:7a:
         11:82:80:0b:62:63:f2:86:52:b8:37:d0:08:b4:b6:1a:b6:9b:
         6b:81:8d:21:30:b0:df:40:f5:5c:cb:f9:59:40:b3:24:0c:b5:
         6d:63:45:5c:ab:5f:f4:f8:3a:b0:4e:6f:00:66:f3:13:92:71:
         5e:f0:cb:ed:6a:9b:8c:75:b8:92:6a:8a:c9:0c:3a:43:b8:4c:
         3a:cb:73:c5:ec:25:b2:d9:98:b7:91:b8:d9:4c:a2:30:d2:91:
         79:96:1a:06:dc:2f:c1:f2:c4:c7:8b:ca:3f:96:57:9d:f4:77:
         25:a7:72:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkrxzlr9buZFnLmJCbL8hQnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjhlN2ZiZDRhYjY5NTA3ZmIxZmUzNTc5YWYzNDNhNTY2
MzkwODYwHhcNMjUwOTA5MDAwMTQwWhcNMjUwOTEwMDAwMTQwWjAzMTEwLwYDVQQD
EygxMzU2ZGNjNjc4MmQwNmE2YTU1OWMyYmI4YjQyM2JiZjRiZGExZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApta4AtJCiTcrECIoQvpTGJJf+ZIf
iXK8G7HyhfIlOiMiJ7U33nwm/GrvYiuY26+k6QGC8A1y/8pVR1Aw+MYwRfp51WQA
ZpFX7rkGngywo1CsQX80SSXz63SbG/ZZBBjqR7fuz+GzzmAb70cJl+KR60OFAL0C
kkHas132hK8Bo/azhSirX59bZOPje8VCgF/R/qjUqvRpjcks/I3ryAc1pmcoLbcB
CcOkC7/4rj6+kbUiRknIrrd3n8NQafkxxtDEetUuRQPNH+ZqOSg/PjI5QUhqKrV5
emSRaNMgXSBS14Zrxu7bgWeVjUWIxjC8Ng/p7vhDgnBW2UqHe2U4SmondQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNW3MZ4LQampVnCu4tCO79L2h+zMB8GA1UdIwQY
MBaAFHf45/vUq2lQf7H+NXmvNDpWY5CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1Njgt
NzdmNmU5NGUzZGNjLzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1NjgtNzdmNmU5NGUzZGNj
LzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8SSlbRe
Q5FcrXp8X8Uncv75+gp1Ka2RnaMi6ZKuZI/HwX3kNLIehQYd23YV7SC0lTWE2LpJ
+cmIBGfUGrdYFuURfGUmD2q3bYWOMZSv9Q445gUFY0b2nwJ1vJew6E3TXnYJCVB5
160fj8bX2xuU3pDODuKFFFZn4HKaJJgvVjaYW1LoSs+G11pvXdTHU9B6EYKAC2Jj
8oZSuDfQCLS2Graba4GNITCw30D1XMv5WUCzJAy1bWNFXKtf9Pg6sE5vAGbzE5Jx
XvDL7WqbjHW4kmqKyQw6Q7hMOstzxewlstmYt5G42UyiMNKReZYaBtwvwfLEx4vK
P5ZXnfR3Jady9w==
-----END CERTIFICATE-----
Generated at Tue Sep 9 10:33:04 2025 by rpki-client